Static task
static1
Behavioral task
behavioral1
Sample
4d62deb9e012ee45a9b2d5c90a15955965957d3c8065b24efdde65a9c8a33b66.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4d62deb9e012ee45a9b2d5c90a15955965957d3c8065b24efdde65a9c8a33b66.exe
Resource
win10v2004-20240412-en
General
-
Target
4cb9eb0ff0c928d50b71fe98fd86ced9b9771a6d1dadcfb30941ec8c850edaaa
-
Size
626KB
-
MD5
5129aeb7c062d892ff0a16d8bb2d8611
-
SHA1
8b745888f6f7acfc7d0881b96f6ac11a980334a4
-
SHA256
4cb9eb0ff0c928d50b71fe98fd86ced9b9771a6d1dadcfb30941ec8c850edaaa
-
SHA512
fe2fde54d593acf162a7132a5cbb303ade81d27fb911143e78f3d95f5c25047b7b2fdfac185d6de5bdce28a63573728430c72758615ebbf3e161b84330f5b55d
-
SSDEEP
12288:jHHjZe227sdDIX49wbqv8/y5l/KutaX9krjB16YtLAT9uCwVUHQpBazCUJ:jnjZeCOYhpX/5M2r3e9TE5ponJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4d62deb9e012ee45a9b2d5c90a15955965957d3c8065b24efdde65a9c8a33b66.exe
Files
-
4cb9eb0ff0c928d50b71fe98fd86ced9b9771a6d1dadcfb30941ec8c850edaaa.zip
Password: infected
-
4d62deb9e012ee45a9b2d5c90a15955965957d3c8065b24efdde65a9c8a33b66.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 653KB - Virtual size: 653KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ